
Daily Open Source Infrastructure Report 

17 September 2014 



Top Stories 

• A 6-mile stretch of Interstate 90 from the Liberty Lake exit in Washington to the Pleasant 
View Road exit in Idaho reopened September 15 after closing for 19 hours while crews 
cleaned about a 1 gallon spill of anhydrous trimethylamine. - KHQ 6 Spokane (See item 9) 

• Valesco Ventures informed 82,601 Aventura Hospital and Medical Center patients in 
Florida September 9 that an employee may have accessed their personal information from 
September 2012 to June 2014. - WPLG 10 Miami (See item 17) 

• A carbon monoxide leak at North Mac Campus in Macoupin County, Illinois, September 
15 caused about 145 people to be hospitalized for treatment and closed the school 
September 16. - KMOV 4 St. Louis; Macoupin County Enquirer-Democrat (See item 19) 

• Fire crews worked September 16 to contain at least 11 wildfires which combined, have 
burned over 170,000 acres across California, prompted evacuation orders for hundreds of 
residents, and burned over 100 structures and vehicles. - USA Today; KXTV 10 
Sacramento (See item 20) 
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Energy Sector 



1. September 16, Jamestown Sun - (North Dakota) Two spills reported in Mountrail 
County. Oasis Petroleum reported a 3 barrel spill of oil and 500 barrel spill of 
hydraulic fracturing water in Mountrail County to the North Dakota Oil and Gas 
Division September 16. The water and oil were contained at the Manhattan Federal 
5792 1 1-2H well site and all but 1 barrel of oil and 20 barrels of water were recovered. 
Source: http://www.iamestownsun.com/content/two-spills-reported-mountrail-countv 

2. September 16, Associated Press - (Michigan) Natural gas leak prompts evacuation 
in SW Michigan. A natural gas leak from an ANR Pipeline prompted the evacuation of 
residents within a one-mile radius in Benton Township for several hours September 16. 
Inspectors are monitoring the air quality while TransCanada worked to shut off the 
flow of natural gas to the pipeline or reroute the flow of gas. 

Source: http://www.9andl0news.com/story/26541795/natural-gas-leak-prompts- 
evacuation-in-sw-michigan 

[ Return to top ] 

Chemical Industry Sector 

See item 13 
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Nuclear Reactors, Materials, and Waste Sector 

3. September 16, Nuclear Street - (Connecticut) Backup feedwater pump issues prompt 
second special inspection at Millstone this year. The U.S. Nuclear Regulatory 
Commission announced September 15 that it would conduct a special inspection at the 
Millstone nuclear power plant in Connecticut after the Unit 3 auxiliary feedwater pump 
unexpectedly stopped and restarted during tests conducted July 15 and September 10. 
The inspection is the second special inspection at the plant this year. 

Source: 

http://nuclearstreet.com/nuclear power industry news/b/nuclear power news/archive/ 
20 14/09/ 1 6/backup-feedwater-pump-issues-prompt-second-special-inspection-at- 
millstone-this-year-09 1 602.aspx 

[ Return to top ] 

Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

4. September 15, IDG News Service - (International) ‘Tiny banker’ malware targets US 
financial institutions. Researchers at Avast analyzed an updated variant of the Tiny 
Banker (also known as Tinba) financial malware and found that it is now able to target 
new financial institutions including ones in the U.S. The malware can inject HTML 
fields into banking Web sites when a user visits them in order to collect personal and 
login information. 

Source: http://www.networkworld.com/article/2684113/tiny-banker-malware-targets- 
us-financial-institutions.html 

5. September 15, U.S. Securities and Exchange Commission - (Tennessee) Tennessee- 
based animal feed company agrees to pay $18 million to settle accounting fraud 
case. Tennessee-based animal feed company AgFeed Industries agreed to pay back $18 
million to investors as part of an agreement with the U.S. Securities and Exchange 
Commission over the company’s fraudulent accounting that artificially inflated its 
stock price. 

Source: http://www.sec.gov/News/PressRelease/Detail/PressRelease/1370542938017 
For another story, see item 30 
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Transportation Systems Sector 

6. September 16, WBAL 11 Baltimore - (National) Some MARC, Amtrak trains 
suspended over downed wires. Amtrak Northeast Regional services, as well as 
Maryland Area Regional Commuter service between the Perryville and Aberdeen 
stations remained temporarily suspended after a Norfolk Southern freight train struck a 
support pole north of Aberdeen, tearing down wires September 16. Several other trains 
were delayed while crews worked to restore service. 

Source: http://www.wbaltv.com/news/marc-amtrak-service-suspended-due-to-downed- 
wires/28080126 

7. September 15, KT1V 4 Sioux City; KUSO 92.7 FM Albion - (Nebraska) Man changing 
tire is severely injured in Highway 275 accident in Stanton Co. NE. A man suffered 
severe injuries when he stepped outside of his car to help change a tire on another 
vehicle along Highway 275 in Stanton County September 14 and was struck by a 
vehicle that crashed into the two cars on the side of the road. Two others were injured 
and both directions of Highway 275 near Highway 24 were closed for 5 hours. 

Source: http://www.ktiv.com/storv/26534949/2014/09/15/man-changing-tire-is- 
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severely-iniured-in-highwav-275-accident-in-stanton-co-ne 



8. September 15, KP1X 5 San Francisco - (California) Big rig driver suffers asthma 
attack, spills grapes on Hwy 101 in Sonoma County. A semi-truck spilled 24 bins 
full of grapes on U.S. Highway 101 near Cloverdale in Sonoma County September 14 
after the driver suffered an asthma attack and lost control of his truck when a bin fell in 
between two trailers and ripped off an axel, closing a portion of southbound lanes for 
nearly 4 hours. 

Source: http://sanfrancisco.cbslocal.com/2014/09/15/big-rig-driver-suffers-asthma- 
attack-spills-grapes-on-hwv-lOl-in-sonoma-county/ 

9. September 15, KHQ 6 Spokane - (Idaho; Washington) After 19 hour shutdown 1-90 is 
back open. A 6-mile stretch of Interstate 90 from the Liberty Lake exit in Washington 
to the Pleasant View Road exit in Idaho reopened September 15 after closing for 19 
hours while crews cleaned about a 1 gallon spill of anhydrous trimethylamine 
September 14. 

Source: http://www.khq.com/storv/26529182/update-i-90-remains-closed-after- 
chemical-spill-detours-in-place 

T Return to top i 

Food and Agriculture Sector 

10. September 16, Food Safety News - (National) Black pepper recalled for Salmonella 
risk. Gel Spice Company, Inc., issued a voluntary recall for 16,443 cases of its Fresh 
Finds Ground Black Pepper sold in 3.55-ounce jars due to possible Salmonella 
contamination discovered during routine sampling by the U.S. Food and Drug 
Administration. The product was distributed to Big Lots Retail Stores nationwide. 
Source: http://www.foodsafetvnews.com/2014/09/black-pepper-recalled-for-potential- 
salmonella-risk 

11. September 15, WPTZ 5 Plattsburgh - (New York) Spontaneous combustion sparked 
feed plant fire. Firefighters responded to a Cargill-owned feed production facility in 
Salem, New York, September 15 to extinguish a fire that was sparked by the 
spontaneous combustion of old feed in a grain bin. 

Source: http://www.wptz.com/news/vermont-new-vork/plattsburgh/spontaneous- 
combustion-sparked-feed-plant-fire/28065686 

12. September 15, U.S. Environmental Protection Agency — (North Dakota) Kemps, LLC 
agrees to resolve risk management violation at Fargo, North Dakota dairy 
processing facility. Kemps, LLC entered into a settlement with the U.S. Environmental 
Protection Agency September 15 and agreed to pay $57,000 in penalties to resolve 
allegations that the company violated risk management provisions of the Clean Air Act 
and stored anhydrous ammonia in amounts exceeding legal thresholds at its diary 
processing facility in Fargo. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/596el7d7cac720848525781f0043629e/90Q2 
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13. September 15, U.S. Environmental Protection Agency - (National) EPA settles with 
DuPont over violations of federal pesticide laws that led to widespread tree deaths 
and damage/ DuPont to pay $1,853,000 penalty to resolve alleged violations of 
pesticide reporting and distribution laws. E.I. du Pont de Nemours and Company 
(DuPont) entered into a settlement with the U.S. Environmental Protection Agency 
(EPA) September 15 and agreed to pay more than $1.8 million in penalties to resolve 
allegations that the company failed to properly disclose the risks of using one of its 
herbicides, Imprelis, which contributed to widespread damage to tree species 
throughout the U.S. The EPA ordered DuPont to stop selling and distributing Imprelis 
in August 2011 after the agency received more than 7,000 reports of tree damage or 
tree deaths related to the application of the herbicide. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/596el7d7cac720848525781f0043629e/c7b2b 

4f94c0f3a0285257d54005ca7da!QpenDocument 

For additional stories, see items 5 and 8 
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Water and Wastewater Systems Sector 

14. September 16, New London The Day - (Connecticut) Water line break closes portion 
of Depot Road in Montville. Operations at the Montville sewage treatment plant were 
shut down after treated wastewater spilled due to a ruptured outflow water line 
September 16. Crews worked to repair the line and closed Depot Road at Route 32. 
Source: http ://w w w . theday . com/article/20 14091 6/NW S 0 1 / 1 4091977 2/1 047 

15. September 16, Associated Press - (Missouri) Sewage spills into St. Louis County 
creek. The Metropolitan Sewer District announced September 15 that a sewer line 
failure caused an unknown amount of sewage to leak into Maline Creek in St. Louis 
County. Officials estimated the spill impacted about 1,000 feet of the creek and advised 
residents to avoid contact for 48-72 hours. 

Source: http://dailviournalonline.com/news/state-and-regional/sewage-spills-into-st- 
louis-county-creek/article ec 1 05 62d-d869-5 a05 -b 1 de-dd4e5 603 8ce8 .html 

16. September 15, WECT 6 Wilmington - (North Carolina) Heavy rainfall to blame for 
Lake Waccamaw sewage spill. Approximately 8,800 gallons of untreated wastewater 
spilled from a manhole into Lake Waccamaw in North Carolina September 14 due to 
heavy rainfall. Officials are taking samples to determine water quality. 

Source: http://www.wect.com/storv/26536971/heavv-rainfall-to-blame-for-lake- 
waccamaw-sewage-spill 
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Healthcare and Public Health Sector 



17. September 16, WPLG 10 Miami - (Florida) Aventura Hospital and Medical Center 
reports data breach. Valesco Ventures informed 82,601 Aventura Hospital and 
Medical Center patients in Florida September 9 that an employee may have accessed 
their personal information, including Social Security numbers, from September 2012 to 
June 2014. Authorities are investigating the breach. 

Source: http://www.locallO.com/news/aventura-hospital-medical-center-reports-data- 
breach/28082920 



18. September 15, U.S. Environmental Protection Agency - (Montana) GlacoSmithKline 
Vaccines agrees to resolve risk management violation at Hamilton, Montana 
facility. GlaxoSmithKline Vaccines agreed September 15 to pay a civil penalty of 
$172,900 to resolve a Clean Air Act violation issued at its Hamilton, Montana facility 
after regulators found the company failed to submit a risk management plan due to its 
on-site quantity of chloroform. The company corrected the violation and submitted a 
risk management plan for the facility. 

Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/0/F718FDF86212909085257D5400761B8D 
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Government Facilities Sector 

19. September 16, KMOV 4 St. Louis; Macoupin County Enquirer-Democrat — (Illinois) 

145 taken to hospitals after carbon monoxide leak in Macoupin Co. school. A 

carbon monoxide leak at North Mac Campus in Macoupin County, Illinois, September 
15 caused about 145 people to be transported to area hospitals for treatment and the 
closure of the school September 16. 

Source: http://www.kmov.com/news/local/Students-transported-to-hospital-after- 
carbon-monoxide-leak- at-Macoupin-County-School-27 5 1 3926 1 .htrnl 

20. September 16, USA Today; KXTV 10 Sacramento - (California) California’s King 
Fire doubles as wildfires spread. Fire crews worked September 16 to contain at least 
11 wildfires which combined, have burned over 170,000 acres across California, 
prompted evacuation orders for hundreds of residents, and burned over 100 structures 
and vehicles. 

Source: http://www.usatodav.com/storv/news/nation/2014/09/15/califomia- 
wildfires/15685257/ 

21. September 16, WREG 3 Memphis - (Tennessee) School bus driver could face charges 
for crash. Ten Bolton High School students and their bus driver were taken to an area 
hospital while several other students were treated at the scene after their school bus 
crossed the center line and side-swiped another vehicle traveling in the opposite 
direction on Austin Peay in Shelby County September 15. 

Source: http://wreg.com/2014/09/15/several-people-iniured-in-school-bus-crash/ 
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22. September 15, Associated Press - (Colorado) 4 students hurt, 1 seriously, in Denver 
lab fire. A fire that ignited while a teacher was conducting a demonstration with 
methanol in the chemistry laboratory at the Science, Math and Arts Academy charter 
school in Denver injured four students September 15. Officials are investigating the 
incident. 

Source: http ://abcnew s . go .com/T echnology/ wireS tory/students-hurt-lab-fire-255 14138 
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Emergency Services Sector 

23. September 15, Silver City Sun-News - (New Mexico) Escaped Grant County 
Detention Center inmates still at large. Grant County authorities are searching for 
two inmates who escaped from the Grant County Detention Center in Silver City 
September 1 1 after an inmate count. The jail was locked down after officials learned 
the men escaped through the ceiling panel and are considered dangerous. 

Source: http://www.scsun-news.com/silver city-news/ci 26539163 
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Information Technology Sector 

24. September 16, Softpedia - (International) Malicious Kindle eBooks can give hackers 
access to your Amazon account. A security researcher identified a security issue in 
Amazon’s “Manage your Kindle page” that can be exploited using a malicious eBook 
file to take over a user’s Amazon account. The same vulnerability was reported and 
fixed in November 2013 but was reintroduced in a new version of the page. 

Source: http://news.softpedia.com/news/Malicious-Kindle-Ebooks-Can-Give-Hackers- 
Access-to- Y our- Amazon- Account-45 8983 . shtml 

25. September 16, The Register - (International) THREE QUARTERS of Android 
mobes open to web page spy bug. A Metasploit developer released a Metasploit 
module for a vulnerability in Android versions 4.2.1 and below that was discovered 
September 1, which could automate an exploitation of the vulnerability and allow 
attackers behind a malicious Web page to see users’ other open pages and hijack 
sessions. 

Source: 

http://www.theregister.co.uk/2014/09/16/three quarters of droid phones open to we 
b page spy bug/ 

26. September 15, KrebsOnSecurity - (International) Linkedln feature exposes email 
addresses. Researchers with Rhino Security Labs demonstrated how an attacker could 
use a ‘find connections’ feature in Linkedln and a large number of email contacts 
generated with likely email addresses to identify the email address of specific 
individuals for possible use in spear-phishing or other malicious activities. Linkedln 
stated that it was planning at least two changes to the way the professional network 
handles user email addresses to counteract the issue. 
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Source: http://krebsonsecurity.com/2014/09/linkedin-feature-exposes-email-addresses/ 



27. September 15, Threatpost - ( International) SNMP DDoS scans spoof Google public 
DNS server. The SANS Internet Storm Center reported September 15 that large-scale 
scans of Simple Network Management Protocol (SNMP) spoofing Google’s public 
DNS server traffic were taking place, indicating a scan being used to identify routers 
and devices using default SNMP passwords. Vulnerable routers and devices could have 
their configuration variables changed, creating a denial of service (DoS) situation on 
the affected devices. 

Source: http://threatpost.com/snmp-based-ddos-attack-spoofs-google-public-dns-server 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

28. September 16, Manchester Enterprise - (Michigan) Comcast customers lose Internet 
service in Manchester. Comcast Internet service was restored to residents and 
businesses in the Manchester area of Michigan following an outage that lasted several 
days due to a storm that caused power lines to fall on fiber optic cables September 5. 
Source: 

http://www.heritage.com/articles/2014/09/16/manchester enterprise/news/doc541799f4 
501934155531 40.txt?viewmode=fullstory 

29. September 15, Park Hills Daily Journal Online - (Missouri) Cut cable cause of 
communication outage. Approximately 100,000 AT&T, Charter, and Big River 
customers in Missouri lost Internet and/or telephone service for nearly 7 hours due to a 
damaged fiber optic cable September 15. 

Source: http://dailyiournalonline.com/news/local/cut-fiber-optic-cable-cause-of- 
intemet-telephone-outage/article bd7 45 974-7 8 86-5f45 -a9fa-2 1 56b37a6 1 60.html 
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Commercial Facilities Sector 

30. September 15, eSecurity Planet - (New York) Insider credit card breach leads to 
$400,000 Saks shopping spree. Authorities arrested six former employees of a New 
York City Saks Fifth Avenue store September 5 for allegedly stealing the payment card 
information of at least 22 customers from store computers and using the data to 
purchase $400,000 in merchandise, some of which was returned to the store for refunds 
that were delivered to accounts in the suspects’ control. 
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Source: http://www.esecurityplanet.com/network-securitv/insider-credit-card-breach- 
leads-to-400000-saks-shopping-spree.html 

31. September 15, WDRB 41 Louisville - (Kentucky) 12 injured as Church bus from 
northwest Indiana runs off road near Corydon. Officials believe the driver of a First 
Baptist Church of Hammond bus en route to a camp swerved to avoid an oncoming car, 
causing the bus to go off the road and turn onto its side on a road near Carydon. All 39 
passengers were evaluated at the scene, and 15 children were transported to area 
hospitals for treatment. 

Source: http://www.wdrb.com/story/26537053/12-iniured-as-church-bus-from- 
northwest-indiana-runs-off-road-near-corydon 

32. September 14, KABC 7 Los Angeles - (California) Mid-City water-main break 
impacts 50 businesses. A 6-inch water main ruptured in the Mid-City neighborhood of 
Los Angeles September 14, leaving about 50 businesses without water. Crews worked 
to repair the break, which was expected to take about 12 hours. 

Source: http://abc7.com/news/mid-citv-water-main-break-impacts-50- 
businesses/308056/ 

33. September 14, WTSP 10 St. Petersburg - (Florida) Wall at Hard Rock Casino 
collapses, injures 8. A 15-foot-high temporary construction wall made of wood and 
drywall collapsed inside the Hard Rock Casino in Tampa September 12, inuring 8 
individuals. Hard Rock officials are investigating what caused the wall to collapse. 
Source: http://www.wtsp.com/story/news/local/2014/09/14/wall-at-hard-rock-casino- 
collapses-injures-8/15613223/ 
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Dams Sector 

34. September 16, Jersey Journal - (New Jersey) Assembly Oks $22.5 million in loans 
for dam restoration projects. The New Jersey Assembly approved $22.5 million in 
State funds September 15 to be allocated as loans for the restoration and upkeep of 15 
dams across the State. The bill will allow New Jersey to use funds from the “Dam, 
Lake, Stream, Flood Control, Water Resources, and Wastewater Treatment Project 
Bond Act of 2003”. 

Source: 

http://www.ni.com/hudson/index.ssf/2014/09/assembly oks 225 million in loans for 
dam restoration projects.html 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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